Here's yet more ransomware using BitLocker against Microsoft's own users

Yet more ransomware is using Microsoft BitLocker to encrypt corporate files, steal the decryption key, and then extort a payment from victim organizations, according to Kaspersky. The antivirus maker's Global Emergency Response team spotted the malware, dubbed ShrinkLocker, in Mexico, Indonesia, and Jordan, and said the code's …

[Pelican Express]

VBScript can run system process?

How comme a VBScript running in user space could do low level system action such as resize partition, and encrypt the entire disk?

[Sandtitz]

Re: VBScript can run system process?

"How comme a VBScript running in user space could do low level system action such as resize partition, and encrypt the entire disk?"

The answer is: it cannot. The malware depends on user having admin rights. Read the Kaspersky analysis, there's a link in the article.

.

"The most plausible explanation for this is that they already had full control of the target system when the script was executed."

"Mitigations [...] Ensure that users have only minimal privileges. This way, they cannot enable encryption features or change registry keys on their own"

[Hubert Cumberdale]

FFS

(see title)

[Hubert Cumberdale]

Re: FFS

Slightly baffled by the downvotes. I was merely expressing general frustration at this as a problem – was I not specific enough?